Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parse_custom_args() function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expose the titles and excerpts of private, draft, pending, scheduled, and trashed posts.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-15525 WordPress Ajax Load More Plugin Unauthenticated Private Post Disclosure Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15525
Post summary
The text announces CVE-2025-15525, describing an unauthenticated private post disclosure issue in the WordPress Ajax Load More plugin, without providing PoC, exploit, or patch details.
CVE-2025-15525 The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the p… https://www.cve.org/CVERecord?id=CVE-2025-15525
Post summary
The text announces CVE‑2025‑15525, describing an authorization flaw in the Ajax Load More WordPress plugin, with no mention of exploitation or mitigation.